Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,430
Disclosures in the tracker, all years
2,145
Of those, indexed in 2026
72
Added in November
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 10 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Australia4 Nov 2026Bristol City Council (Trading with Schools platform)The source does not say how they got in.Yahoo News Australia (citing BBC)
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
350 million customers' personal and payment data exposed via infostealer malware infection
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Finance · 24,000,000 records
The disclosure as indexed does not name the organisation.
October 2024 breach compromised personal data of over 24 million individuals including sensitive financial information; €42 million fine
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
Infostealer infection exposed personal and payment data of 350 million customers
1 Oct 2024
Critical1 Oct 2024
Japan Aerospace Agency
Government · Records not stated
October data breach leveraging VPN and Microsoft 365 security holes, attributed to Chinese state actors
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
GDPR breach in October 2024 compromised personal data of over 24 million individuals including financial data; fined €42 million
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
350 million customers' personal and payment data exposed via infostealer infection
1 Oct 2024
Critical1 Oct 2024
French Telecom Company
Technology · 24,000,000 records
GDPR breach compromised personal data of over 24 million individuals including sensitive financial information due to lack of basic security controls
1 Oct 2024
Critical1 Oct 2024
French Telecoms (unnamed subsidiaries)
Technology · 24,000,000 records
GDPR violations including lack of basic security controls; 24M customer records compromised with personal and financial data exposed
1 Oct 2024
Critical1 Oct 2024
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid admin and VPN credentials for 73,932 FortiGate firewalls
1 Oct 2024
Critical1 Oct 2024
French Telco Subsidiaries
Finance · 24,000,000 records
24 million individuals' personal and financial data compromised in October 2024 breach; €42 million fine
1 Oct 2024
High1 Oct 2024
Adobe Commerce Customers
Technology · Records not stated
Sensitive customer data from thousands of online stores stolen via CosmicSting exploitation
1 Oct 2024
Critical1 Oct 2024
French telecoms (unnamed subsidiaries)
Technology · Records not stated
October 2024 breach compromising personal data of 24+ million individuals including sensitive financial information; GDPR violations
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
24 million+ individuals' personal and financial data compromised in October 2024 breach
1 Oct 2024
High1 Oct 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to 50,000 residents via private APN access point
1 Oct 2024
Critical1 Oct 2024
French Telecoms Subsidiaries
Technology · 24,000,000 records
Breach in October 2024 compromised personal data of over 24 million individuals including sensitive financial information, €42 million fine
1 Oct 2024
Critical1 Oct 2024
Orange (French telecoms)
Technology · 24,000,000 records
GDPR data breach in October 2024 compromised personal data of over 24 million individuals including sensitive financial information.
1 Oct 2024
Critical1 Oct 2024
U.S. Government
Government · 53,070 records
53,070 passwords associated with U.S. government email domains exposed in public sources since early 2024, including White House credentials
1 Oct 2024
High1 Oct 2024
FREE S.A.S.
Technology · Records not stated
French ISP hacked; threat actor claimed to have sold customer data; breach confirmed October 2024
1 Oct 2024
Critical1 Oct 2024
French Telecoms (Unnamed)
Technology · 24,000,000 records
October 2024 breach compromised personal data of 24 million individuals, resulted in €42M fine
1 Oct 2024
Critical1 Oct 2024
French telecoms (3 companies)
Technology · 24,000,000 records
GDPR breach in October 2024 compromised personal data of over 24 million individuals including sensitive financial information
1 Oct 2024
Critical1 Oct 2024
French Telecom Subsidiaries
Finance · Records not stated
October 2024 breach compromised 24+ million individuals' personal and financial data; fined €42M for GDPR violations
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Sector not stated · 24,000,000 records
The disclosure as indexed does not name the organisation.
Data breach in October 2024 compromised personal data of over 24 million individuals including sensitive financial information
1 Oct 2024
Critical1 Oct 2024
Żabka Polska
Retail · Records not stated
Data breach exposing 541,000 Jira issues and customer data from major Polish retailer with 13K+ stores
1 Oct 2024
Critical1 Oct 2024
French Telecoms (Orange/SFR/Bouygues)
Technology · 24,000,000 records
GDPR breach exposed personal data of 24M+ individuals including sensitive financial information in October 2024
1 Oct 2024
Were you affected?